And function of ease of manual testing. Some things are impossible to manually test without changing the actual code.

For example, testing access permissions. Your UI isn't gonna display data or operations you don't have access to.

But that doesn't mean your back end is honoring permissions.

The other thing to take into account is how noticable the bug is. You should inch more towards writing tests for bugs that are less likely to be noticed by someone.